PT-2019-2857 · Hewlett Packard · Hp Deskjet 3630

Publicado 2019-04-23 · Atualizado 2020-01-22 · CVE-2019-6319

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firmware version SWP1FN1912BR or higher)

Description The issue is related to a Cross-Site Request Forgery (CSRF) that could allow a remote attacker to cause a denial of service or device misconfiguration.

Recommendations For HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A with firmware version SWP1FN1912BR or higher, consider restricting access to the device until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

BDU:2019-02822

CVE-2019-6319

Produtos afetados

Hp Deskjet 3630

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-6319 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-6319 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-02822 · Nota de Segurança
• https://support.hp.com/us-en/document/c06308143 · Aviso do Fabricante